Verifying passwords on a mobile device
View Patent ↗Methods, systems, and computer programs for verifying a password are disclosed. For example, the password can be verified on a mobile device to control user access to the mobile device. In some implementations, a mobile device includes a user interface, a main processor, and a co-processor. The user interface receives a submitted password value from a user. The main processor calls the co-processor to provide a hash chain input value based on the submitted password value. The main processor evaluates a hash chain based on the hash chain input value provided by the co-processor. Evaluating the hash chain generates a submitted password verification value. The submitted password verification value is compared to a stored password verification value stored on the mobile device. Access to mobile device functionality may be permitted or denied based on a result of the comparison.
1. A mobile device comprising:
a user interface operable to receive a submitted password value based on a user interaction;
a co-processor operable to evaluate a co-processor function;
a main processor communicably coupled to the co-processor, wherein both the main processor and the co-processor are located in the mobile device; and
a computer-readable medium storing instructions that are executable by the main processor to perform operations comprising:
calling the co-processor of the mobile device to provide a hash chain input value based on the submitted password value;
evaluating, at the mobile device, a hash chain based on the hash chain input value provided by the co-processor, wherein evaluating the hash chain comprises generating a submitted password verification value that is different than the submitted password value; and
comparing, at the mobile device, the submitted password verification value to a stored password verification value stored on the mobile device, wherein the stored password verification value was stored on the mobile device prior to receiving the submitted password value.
2. The mobile device of claim 1 , wherein the co-processor comprises a first co-processor operable to evaluate a first co-processor function, the hash chain input value comprises a first hash chain input value, the mobile device further comprises a second co-processor operable to evaluate a second co-processor function, and the main processor is communicably coupled to the second processor, wherein the operations further include:
calling the second co-processor to provide a second hash chain input value based on the submitted password value,
wherein evaluating the hash chain by the main processor comprises evaluating the hash chain based on the first hash chain input value and the second hash chain input value.
3. The mobile device of claim 2 , wherein the first co-processor comprises a multi-media co-processor and the second co-processor comprises a cryptographic co-processor.
4. The mobile device of claim 2 , further comprising a communication bus that provides communication between the main processor and the first co-processor, and between the main processor and the second co-processor.
5. The mobile device of claim 1 , wherein evaluating the hash chain includes:
evaluating a first iteration of a cryptographic hashing function H based on the hash chain input value provided by the co-processor; and
evaluating subsequent iterations of the cryptographic hashing function H based on an output of one or more prior iterations of the cryptographic hashing function H.
6. The mobile device of claim 1 , wherein calling the co-processor comprises calling the co-processor to provide the hash chain input value based on the submitted password value, a salt value, and a counter value.
7. A method for verifying a password on a mobile device having a main processor and a co-processor, the method comprising:
receiving a submitted password value on a mobile device that includes a main processor and a co-processor;
calling the co-processor of the mobile device to provide a hash chain input value based on the submitted password value;
evaluating, at the mobile device, a hash chain by the main processor based on the hash chain input value provided by the co-processor, wherein evaluating the hash chain comprises generating a submitted password verification value that is different than the submitted password value; and
comparing, at the mobile device, the submitted password verification value to a stored password verification value stored on the mobile device, wherein the stored password verification value was stored on the mobile device prior to receiving the submitted password value.
8. The method of claim 7 , wherein evaluating the hash chain by the main processor includes:
evaluating a first iteration of a cryptographic hashing function H based on the hash chain input value provided by the co-processor; and
evaluating subsequent iterations of the cryptographic hashing function H based on an output of one or more prior iterations of the cryptographic hashing function H.
9. The method of claim 8 , wherein each iteration of the cryptographic hashing function H is evaluated based additionally on a salt value and a counter value for the iteration.
10. The method of claim 8 , wherein the hash chain input value comprises a first hash chain input value, the method further comprising calling the co-processor to provide subsequent hash chain input values, wherein a subset of the subsequent iterations of the cryptographic hashing function H are evaluated based the subsequent hash chain input values provided by the co-processor.
11. The method of claim 10 , further comprising:
accessing a vector stored on the mobile device; and
identifying the subset of the subsequent iterations based on the vector.
12. The method of claim 10 , wherein the subset are selected based on relative computing times for evaluating a co-processor function at the co-processor and evaluating the cryptographic hashing function at a main processor.
13. The method of claim 10 , wherein calling the co-processor to provide the first hash chain input value comprises:
providing a first co-processor input value from the main processor to the co-processor, wherein the first co-processor input value is based on the submitted password value; and
receiving the first hash chain input value at the main processor in response to providing the first co-processor input value to the co-processor.
14. The method of claim 13 , wherein calling the co-processor to provide the subsequent hash chain input values comprises:
providing subsequent co-processor input values from the main processor to the co-processor, wherein each of the subsequent co-processor input values is based on an output of one or more iterations of the cryptographic hashing function H; and
receiving the subsequent hash chain input value at the main processor in response to providing the subsequent co-processor input values to the co-processor.
15. The method of claim 7 , wherein the co-processor comprises a first co-processor of the mobile device and the hash chain input value comprises a first hash chain input value, the method further comprising:
calling a second co-processor of the mobile device to provide a second hash chain input value based on the submitted password value,
wherein evaluating the hash chain by the main processor comprises evaluating the hash chain based on the first hash chain input value and the second hash chain input value.
16. The method of claim 15 , wherein the first co-processor provides the first hash chain input value by evaluating a discrete cosine transform function, and the second co-processor provides the second hash chain input value by evaluating at least one of an AES encryption function or AES decryption function.
17. The method of claim 7 , further comprising granting access to functionality of the mobile device based on identifying that the submitted password verification value matches the stored password verification value.
18. The method of claim 7 , further comprising denying access to functionality of the mobile device based on identifying that the submitted password verification value does not match the stored password verification value.
19. A non-transitory computer-readable medium storing instructions that are operable when executed by data processing apparatus to perform operations for verifying a submitted password, the operations comprising:
receiving a submitted password value on a mobile device that includes a main processor and a co-processor;
calling the co-processor of the mobile device to provide a hash chain input value based on the submitted password value;
evaluating, at the mobile device, a hash chain by the main processor based on the hash chain input value provided by the co-processor, wherein evaluating the hash chain comprises generating a submitted password verification value that is different than the submitted password value; and
comparing, at the mobile device, the submitted password verification value to a stored password verification value stored on the mobile device, wherein the stored password verification value was stored on the mobile device prior to receiving the submitted password value.
20. The computer-readable medium of claim 19 , wherein the co-processor comprises a first co-processor of the mobile device and the hash chain input value comprises a first hash chain input value, the operations further comprising:
calling a second co-processor of the mobile device to provide a second hash chain input value based on the submitted password value,
wherein evaluating the hash chain by the main processor comprises evaluating the hash chain based on the first hash chain input value and the second hash chain input value.
21. The computer-readable medium of claim 19 , wherein evaluating the hash chain by the main processor includes:
evaluating a first iteration of a cryptographic hashing function H based on the hash chain input value provided by the co-processor; and
evaluating subsequent iterations of the cryptographic hashing function H based on an output of one or more prior iterations of the cryptographic hashing function H.
22. The computer-readable medium of claim 19 , wherein evaluating the hash chain comprises evaluating iterations of a cryptographic hashing function H, wherein a subset of the iterations utilize hash chain input values provided by the co-processor.
23. The computer-readable medium of claim 22 , wherein the subset of iterations is designated based on particular data processing hardware components of the mobile device.